| Organization | Vulnerability |
|---|---|
| Yahoo | Mobile |
| Mobile | |
| VK | Mobile |
| Bugfinders | RCE, FU, XSS |
| Apple | Configurations |
| eBay | Configurations |
| SuperDry | XSS, CSRF, PE, AI, IDOR, UE, PD, DT |
| Hike | Mobile |
| RozerPay | BLB |
| ChaiPoint | BLB |
| Papa John's Pizza | BLB |
| InnerChef | BLB |
| Nestaway | BLB |
| GoZefo | BLB |
| Licious | BLB |
| McDonald's | BLB |
| Applause (uTest) | BLB |
| Whisper | Mobile |
| Mail.Ru | Mobile |
| Oath | Mobile |
| Mobile | |
| Mobile | |
| Web | |
| Sifter | Configurations |
| Adobe | Configurations |
- AI: Authentication Issue
- IDOR: Insecure Direct Object Reference
- XSS: Cross Site Scripting
- BASM: Broken Authentication & Session Management
- PE: Privilege Escalation
- CSRF: Cross Site Request Forgery
- BLB: Business Logical Bug
- TB: Token Bypass Vulnerability
- UE: Username Enumeration
- PD: Path Disclosure
- DT: Directory Traversal
- FU: File Upload Vulnerability
- RCE: Remote Code Execution
- Mobile: Mobile AppSec Vulnerability
- Configurations: Using Components with Known Vulnerabilities